Read the docs

Wplearnmanager

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wplearnmanager records in CISA KEV

No Wplearnmanager vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Learn Manager 1 record LOW

Records

2 records

TI-2021-22588 CVE-2021-47975 · GHSA-x5v4-ww8v-7jhc

WordPress Plugin WP Learn Manager 1.1.2 Stored XSS

Priority MEDIUM 62

WP Learn Manager 1.1.2 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the `fieldtitle` parameter.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00214 Published 2026-05-16 No fix listed CWE-79
TI-2021-06791 CVE-2021-24504 · GHSA-pqq6-8mr8-33fw

WP LMS <= 1.1.2 - Stored Cross-Site Scripting (XSS)

Priority LOW 29

The WP LMS – Best WordPress LMS Plugin WordPress plugin through 1.1.2 does not properly sanitise or validate its User Field Titles, allowing XSS payload to be used in them.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00762 Published 2021-08-02 No fix listed CWE-352
Open these records in search →